Digital Forensic Survival Podcast

This week I tackle .NET. It is an ecosystem that is associated with malicious Powershell activity.

This week I revisited powershell from a process fast triage context.

This week is about the top threats to cloud computing.

This week I continue with the fast triage method for processes with a focus on historical records.

This week I cover threat modeling from a DFIR point-of-view. It provides a standard framework to classify and rate the severity of vulnerabilities discovered during investigations.

This week I run through a threat intel resource you may use for standardized attack information.

This week I revisit Svchost and the triage methods to apply.

This week is about the top threats to cloud computing.

This week is a case study that demonstrates the power behind IR fundamental methodology.

This week I continue with the fast triage method for processes with a focus on, well, everything else!

This week is about the top threats to cloud computing.

This week is about preparing for Golden SAML attacks for both Incident Response and Threat Hunting.

This week is about applying basic statistical analysis to threat hunting. The results are effective!

This week is about theatrics in security and how to avoid the trap.

This week I revisit Windows Core Processes and the triage methods to apply to them.

This week I talk about vulnhub, a free resource to practice ethical hacking skills and sharpen your DFIR skills.

This week I revisit Windows Core Processes and the triage methods to apply to them.

This week is the fourth part of the Network-Fast-Triage mini-series. In this installation I cover triage techniques for Windows event logs that record blocked network activity.

This week is about supply chain security posture from a DFIR point-of-view.

This week I go over a method to detect kernel process masquerading on Linux systems.